Which type of software vulnerability involves an attacker injecting malicious scripts into trusted websites, which are then executed by unsuspecting client web browsers? MCQ with Answer and Explanation
Which type of software vulnerability involves an attacker injecting malicious scripts into trusted websites, which are then executed by unsuspecting client web browsers?
A. Cross-Site Scripting (XSS)
B. Denial of Service (DoS)
C. Buffer Overflow
D. SQL Injection
Answer: Option A
Solution (By JKSSB Mock Tests)
Cross-Site Scripting (XSS) is a security vulnerability where malicious script blocks are injected into reliable web templates, running malicious scripts directly inside client browsers.
Explanation:
The 'HttpOnly' security flag prevents client-side scripts from reading cookie strings via properties like 'document.cookie', protecting session tokens from malicious script injection exploits.
Which specific browser utility or tool allows web developers to modify, inspect, and trace the active visual styles and spacing constraints of elements on a page in real time natively?
Explanation:
The Elements panel in browser Developer Tools provides a live, interactive view of a webpage's DOM structure and applied CSS rules, allowing developers to test design adjustments instantly on screen.
No comments yet. Be the first to start the discussion!